CVE-2008-4175 EXPLOIT
6.5
MEDIUM · CVSS 2.0 · EPSS 1.1% (pctl 64)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php.
Scoring
| CVSS | 6.5 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| EPSS | 1.06% — more likely to be exploited than 64% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-09-23 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| linkbidscript | linkbidscript |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Link Bid Script 1.5 - Multiple SQL Injections | 2008-09-15 |
References
- http://secunia.com/advisories/31853
- http://securityreason.com/securityalert/4299
- http://www.securityfocus.com/bid/31191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45153
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45155
- https://www.exploit-db.com/exploits/6466
- http://secunia.com/advisories/31853
- http://securityreason.com/securityalert/4299
- http://www.securityfocus.com/bid/31191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45153
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45155
- https://www.exploit-db.com/exploits/6466
→ the Explorer · watch your stack · NVD